Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/417B6600395F11EDBB6C75ACF1222468.roa
File: 417B6600395F11EDBB6C75ACF1222468.roa (raw, json)
Hash identifier: /SSjZzUULfM8pQsxfuh90ENDZWr7r/7FqsCb4K4YEA8=
Subject key identifier: F9:F4:3B:88:39:4D:AA:09:18:46:BD:C8:42:72:08:F9:F7:36:C4:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1825
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/417B6600395F11EDBB6C75ACF1222468.roa
Signing time: Wed 21 Sep 2022 03:41:20 +0000
ROA not before: Wed 21 Sep 2022 03:41:17 +0000
ROA not after: Fri 30 Dec 2022 03:41:17 +0000
asID: 35916
IP address blocks: 45.197.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6181 (0x1825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 03:41:17 2022 GMT
Not After : Dec 30 03:41:17 2022 GMT
Subject: CN=632a87e0-8ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:b5:e6:9c:da:a0:b4:31:74:34:87:75:79:
9f:c2:3f:8e:69:eb:03:58:45:25:09:d2:cd:40:b2:
48:8c:ce:69:db:13:e5:36:f8:2f:ec:54:dc:55:3b:
3f:1a:81:1b:1c:77:f6:61:9b:ee:69:ac:3c:50:c2:
bf:6d:c1:f0:f8:2b:a9:ba:22:8d:24:91:74:64:b8:
86:9e:ec:a8:ea:75:d0:62:32:bd:a6:06:ce:09:3d:
dd:0a:59:fe:3e:d6:cb:d5:85:84:28:1f:a8:52:ab:
cc:d0:55:7f:ec:87:71:13:49:19:dc:f7:de:c8:92:
ae:81:e9:18:ab:ce:ce:b4:4c:48:a8:46:5d:54:25:
bb:fc:94:ce:12:34:45:fa:96:32:3f:3a:bb:da:17:
ca:8f:77:f3:c7:b6:f0:04:7b:ac:ed:0e:71:d3:83:
ca:93:c5:b2:72:3a:33:2e:ec:ad:0e:86:01:a0:b1:
37:f1:ed:bc:a5:47:82:b4:5f:80:37:31:1e:06:61:
c0:30:86:c9:cc:57:34:96:2f:67:15:b2:b8:02:70:
ed:de:81:60:fc:7e:a0:5f:57:b3:8f:3c:92:33:cf:
5c:47:28:4d:2e:f1:43:3f:97:d5:31:61:65:42:01:
b2:1f:fa:ff:00:a0:e3:ba:1f:80:82:36:e2:0a:2a:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F4:3B:88:39:4D:AA:09:18:46:BD:C8:42:72:08:F9:F7:36:C4:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/417B6600395F11EDBB6C75ACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:b4:18:e2:8a:d6:8c:f2:cb:a1:fa:3a:0f:1b:6b:21:3f:91:
59:97:5c:7b:d9:5f:1b:50:71:4c:c1:49:a3:2e:62:e1:3e:75:
bd:bb:37:99:7f:6f:92:ca:b0:cb:65:13:0f:4e:f8:74:5f:ec:
60:5d:2b:01:e2:c9:ca:54:68:a1:d5:de:0d:c5:cc:17:78:7c:
b7:aa:fa:a6:50:43:30:ce:81:e8:12:92:7c:6e:bf:a5:4a:63:
b7:f2:0e:68:a7:46:3f:32:b2:b0:0a:cb:8b:e0:70:49:21:bb:
97:03:c3:9b:fb:1e:ad:23:0a:b3:86:ea:7d:af:83:23:bd:db:
1f:10:01:a4:74:02:5e:55:bc:d6:13:b8:bb:7e:bd:61:9d:7e:
34:7a:e6:e8:82:2a:ec:44:97:0b:80:d0:c5:fd:64:45:24:14:
eb:e0:34:26:a2:8b:64:ab:0e:09:10:62:28:fa:cb:ca:a8:4a:
74:cd:0c:bb:fa:93:47:6d:49:a7:b0:1c:7d:24:36:0e:77:ed:
f3:24:c1:9a:e3:f4:1e:00:52:58:b7:09:1c:e1:79:1b:58:e3:
e3:40:70:18:69:4f:f5:92:1f:12:59:46:35:b6:e2:13:26:2d:
06:1d:b2:d5:f5:50:3e:5a:6a:23:3c:b6:71:6f:60:20:36:ad:
af:d0:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org